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KJKT Electronic Mail (E-MAIL) Security Policy # 0106-003 - Effective 1/29/96 

I. DEFINITIONS: 

DATA Ownership: R,J. Reynolds Tobacco Company is the sole owner of all Corporate data, 
information, and ideas created in the course of conducting its business. The Company, either 
explicitly or implicitly, empowers employees, agents, vendors, and contractors to act as users, 
guardians and custodians of Corporate data to ensure the efficient management and processing 
of business transactions, Such individuals are referred to as Data Owners. 

Electronic Mall is defined as an electronic method of sending, receiving, and filing information 
between Data Owners using computer systems. This policy extends to all Company-provided 
computer systems. 

Company refers to R.J. Reynolds Tobacco Co. (RJRT) 

Target audience includes Data Owners of the RJRT E-MAIL systems (ALL-IN-1, Microsoft MAIL, 
Office Vision/MVS, DISOSS, and RemoteWare). 

II. POLICY: 

Conformance with Company Policy - E-MAIL message content must conform to all Company 
policies and practices including, but not limited to, those relating to equal employment opportunity, 
harassment, and the safeguarding of proprietary information. E-MAIL messages should never be 
used for personal business that is contrary to business purposes (e.g., chain letters). 

Privacy • The information contained within E-MAIL messages is company property, Data Owners 
should have no expectation of privacy with respect to E-MAIL message content. The Company 
reserves the right to access and retain all E-Mail. 

Information Protection - Each company Data Owner is responsible for documents stored under 
their control. These documents may reside in file cabinets, on PC workstations, or on network 
storage devices. Each Data Owner is responsible, per Company policies, for data confidentiality, 
integrity, retention (to include litigation holds and compliance with existing preservation orders), 
and access authorization (Reference Computer Based Information and Data Access Policy #01- 
06-002 and Records Management Policy # 01-06-005). 

Effective use of Company Resources - The electronic storage of E-MAIL messages is a 
significant cost item. It is the responsibility of each Data Owner to maintain only those E-MAIL 
messages required to conduct company business, including conformance with legal, regulatory 
and/or statutory retention requirements. 

Management of E-MAIL Documents - RJRT's electronic mail systems provide two primary 
functions: 1) Sending and receiving information and 2) filing information for later desktop retrieval. 
Information sent via E-MAIL generally resides in an Inbox’ until it is read and filed based on 
business requirements. To promote the cost-effective usage of the E-MAIL systems at RJRT, the 
following procedure is in effect: 
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1. The E-MAIL systems “Inbox”, “Read mail”, “Sent Mail”, and "Wastebasket” files will be 
automatically cleared weekly of all Information that Is over forty-five days old. If 
business information needs to be retained for more than 45 days, Data Owners must file the 
information in their Private Folders, Exception: Data Owners using Office VIslon/MVS 
and/or RemoteWare should manually delete documents over 45 days old since no 
automated delete function is available. 

2. Data Owners should periodically clean-up their Private Folders to help minimize storage 
cost and to promote the efficient utilization of system resources. Private Folder space limits 
will be defined and enforced for each Data Owner where technically feasible. 

3. The E-MAIL systems will be backed up daily, and if necessary, individual Data Owner files 
can be restored for up to ten previous days. After ten days the backup tapes will be 
cleared and re-cycled. 

4. The Company may be periodically involved in investigations or litigation that could require Jhe 
extended retention of documents based on the subject matter. Certain departments and 
groups, as designated by the Law department, are under direction to save documents 
potentially covered by current litigation hold requirements. A separate E-MAIL account 
named “RETAIN” has been established for the extended retention of these documents and 
related attachments. The following procedure must be followed to ensure that the 
Company can promptly, accurately, and completely respond to litigation-related document 
requests: 

• At each logon to an E-Mail system, litigation-retention instructions will be displayed 
on a banner screen. 

• For any document sent by a Data Owner covered by the retention criterion, the Data 
Owner must key or select “RETAIN” as a cc recipient of the document. If any 
document, covered by the retention criterion, is received from a sender outside 

the Company , the Data Owner must forward the document to “RETAIN”. 

• Data Owners must make every reasonable effort to ensure that all pertinent and 
complete information is sent to the RETAIN account. If there is any question as 
to whether or not a document should be saved- SAVE OR FORWARD the mail 
item to “RETAIN”. 
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